PT-2020-13258 · Openfind · Openfind Mail2000

Published 2020-09-01 · Updated 2021-07-21 · CVE-2020-12776

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Openfind Mail2000 (affected versions not specified)

Description The issue allows attackers to execute unauthorized commands after obtaining the administrator access token or cookie, due to broken access control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-12776

Affected Products

Openfind Mail2000

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-12776 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12776 · Vendor Advisory
• https://t.me/cibsecurity/14400 · Telegram Post
• https://twcert.org.tw/tw/cp-132-3897-01d73-1.html · Note